4.3
CVSSv2

CVE-2017-10791

Published: 02/07/2017 Updated: 02/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP prior to 0.11.0. For example, a crash was observed within the library code when attempting to convert invalid SPSS data into CSV format. A crafted input will lead to a remote denial of service attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu pspp 0.10.5-pre2

Vendor Advisories

Debian Bug report logs - #866890 CVE-2017-10791 CVE-2017-10792 Package: pspp; Maintainer for pspp is Debian Science Team <debian-science-maintainers@listsaliothdebianorg>; Source for pspp is src:pspp (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 2 Jul 2017 14:57:01 UTC Severit ...